article thumbnail

China-Linked Apps Pose Threat to Google Play Store Users

SecureWorld News

The Google Play Store, a widely-trusted source for Android applications, has recently become a battleground for a concerning wave of spyware with ties to China. Operating under the radar, these apps silently collect and transmit sensitive data to servers based in China, posing significant risks to user data security and privacy.

Spyware 64
article thumbnail

TheTruthSpy stalkerware, still insecure, still leaking data

Malwarebytes

In 2022, tech publication TechCrunch discovered that TheTruthSpy and other spyware apps share a common Insecure Direct Object Reference (IDOR) vulnerability, CVE-2022-0732. The publications described the bug as “extremely easy to exploit, and grants unfettered remote access to all of the data collected from a victim’s Android device.”

Spyware 124
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

On the 20th Safer Internet Day, what was security like back in 2004?

Malwarebytes

Data collected by the Internet Storm Center dug into “Survival Time History”, which is “calculated as the average time between reports for an average target IP address. The pop up blocker in particular was a big help with the proliferation of adware and spyware plugging into advertising networks.

article thumbnail

The State of Stalkerware in 2023–2024

SecureList

To calculate the statistics, data from the consumer line of Kaspersky’s mobile security solutions was reviewed according to the Coalition Against Stalkerware detection criteria. Other types of monitoring or spyware apps that fall outside of the Coalition’s definition are not included in the statistics found here.

Mobile 78
article thumbnail

Spam and phishing in 2022

SecureList

If the movie lover entered their bank card details on the fake site, they risked paying more than the displayed amount for content that did not exist and sharing their card details with the scammers. Soccer fans chasing merchandise risked compromising their bank cards or just losing some money.

article thumbnail

Advanced threat predictions for 2024

SecureList

This politician became the target of a previously undiscovered “zero-day” attack aimed at infecting his phone with spyware. iOS devices may not be the only targets: other devices and operating systems could also face risks.

Hacking 102
article thumbnail

In conversation: Bruce Schneier on AI-powered mass spying

Malwarebytes

There’s a, there’s a “national security risk du jour.” I have access to AI tools in a way that I don’t have access to data collection regimes. I have access to AI tools in a way that I don’t have access to data collection regimes. I wanted to separately ask: We talked about corporations.